defirisk.co
rubric v1.7.0

Commit timezone consistent with stated geography

Yearn Finance's assessment for RD-F-119 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Commit timezone analysis not performed. GitHub API commit histogram analysis of yearn-vaults-v3 contributors is a programmatic-hard task requiring pipeline tooling not available in this assessment pass. The Coordinape/Keller DPRK incident is contextually relevant but Keller's access was to a peripheral tool, not the V3 vault codebase itself. No public reporting of timezone anomaly in the yearn-vaults-v3 repo has been identified. Assessment deferred to curator pipeline.

Sources #

  • GitHub
    yearn/yearn-vaults-v3 — GitHubyearn-vaults-v3 GitHub repo — commit history exists but timezone histogram analysis not performedretrieved 2026-05-16

Methodology #

Determine whether the distribution of commit hours in the repo is consistent with the team's publicly stated geography (anomaly flag for DPRK-precursor pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol yearn-finance factor RD-F-119 score gray collected_at 2026-05-16 08:34:32